$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: /fgOe1Chb97e88tjMRjyKUfcRm17IJSqxMzPf8Btqqc= Subject key identifier: 2B:A8:96:F6:44:39:D6:6D:93:67:6E:78:97:B3:47:73:8A:1D:DE:B3 Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 74AA1A068AE7AEC21143D8F0C4E5B02F0A3BA4DE Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:41 +0000 ROA not before: Tue 07 Oct 2025 13:00:41 +0000 ROA not after: Tue 06 Oct 2026 13:05:41 +0000 asID: 274486 IP address blocks: 2804:94e8:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:aa:1a:06:8a:e7:ae:c2:11:43:d8:f0:c4:e5:b0:2f:0a:3b:a4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:41 2025 GMT Not After : Oct 6 13:05:41 2026 GMT Subject: CN=2BA896F64439D66D93676E7897B347738A1DDEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:94:f7:26:87:c4:bd:bd:47:1d:87:23:c2: a5:95:1d:18:a3:cf:fb:a0:c4:72:25:86:dc:bf:89: b5:b7:f1:e5:11:d9:93:41:45:1f:f6:53:35:15:80: c1:40:9a:18:22:92:d0:47:cc:a3:e4:5a:13:b1:26: b5:c6:23:20:61:b6:fb:69:d2:19:41:27:bc:6d:cd: a8:86:8b:ab:76:20:68:38:5a:c7:4f:17:63:73:85: b8:1b:03:55:5e:01:b4:d0:0b:89:25:b0:57:a2:57: 4f:db:76:58:5f:4c:bc:57:cc:17:0e:36:95:ac:b3: 92:bf:58:3f:22:88:81:97:28:2d:08:29:25:24:ba: 87:c9:75:49:50:04:b4:81:5f:31:83:55:52:86:3c: 6b:d5:9f:f9:ce:60:84:fb:80:85:94:5f:49:b8:61: 0d:01:a1:c5:16:b6:fa:0a:b2:1a:a4:f9:fd:bc:ee: 5d:cd:aa:34:ed:57:a9:1c:c5:97:0b:0b:67:27:ac: 7e:b5:b4:ff:41:eb:6f:4f:5c:7b:06:17:39:40:58: e4:25:0f:30:e2:fa:a4:a3:e2:7d:e4:01:4f:87:f1: 74:88:cd:16:ec:f4:5d:91:4b:fa:b1:a9:23:c4:db: 5d:5f:21:c6:12:7e:17:ca:6a:ec:36:4d:35:ad:90: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A8:96:F6:44:39:D6:6D:93:67:6E:78:97:B3:47:73:8A:1D:DE:B3 X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:2000::/48 Signature Algorithm: sha256WithRSAEncryption be:ef:58:79:59:a2:ba:d1:0d:f1:e7:67:2a:d0:a6:f3:55:5b: 32:95:47:e8:df:36:9b:37:8e:52:f8:78:72:96:d1:20:c8:b4: f0:2c:79:78:29:f4:ea:24:cf:f3:2d:7a:aa:44:02:08:08:9e: 37:81:0e:7c:e8:d7:d4:d0:0b:d0:39:65:05:35:59:ad:bc:ac: 43:05:49:e9:e6:92:8d:08:85:84:1f:ff:17:0d:7b:04:be:b1: e7:ba:56:49:75:25:8e:c3:1c:c8:20:2f:7f:a2:31:dc:41:d5: 93:da:5b:4e:b4:39:0d:46:ad:c5:7c:37:91:91:f6:14:6f:d9: 32:3a:a9:d0:8c:0d:71:3c:ab:1d:58:85:ea:ba:07:f7:f4:9f: 48:f6:06:42:0e:48:3e:01:30:05:22:ac:b8:17:10:ef:72:7b: 34:47:57:c2:28:02:c7:5a:f8:78:cb:47:f6:0c:e1:dd:d8:90: 07:2f:7b:ec:4d:19:75:4c:0c:97:9d:9e:b7:62:cc:07:ab:8f: d3:4c:ad:16:2f:8c:1b:c4:93:50:80:98:e3:19:cb:73:9f:dc: 58:df:48:54:b1:4f:c4:6e:ba:10:77:54:37:60:ad:ba:19:01: 7e:23:19:38:70:b6:9b:85:21:d5:26:8e:f2:6e:1a:6a:29:00: 5b:d4:32:ec -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUdKoaBornrsIRQ9jwxOWwLwo7pN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDFaFw0yNjEwMDYxMzA1NDFaMDMxMTAvBgNV BAMTKDJCQTg5NkY2NDQzOUQ2NkQ5MzY3NkU3ODk3QjM0NzczOEExRERFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZepT3JofEvb1HHYcjwqWVHRij z/ugxHIlhty/ibW38eUR2ZNBRR/2UzUVgMFAmhgiktBHzKPkWhOxJrXGIyBhtvtp 0hlBJ7xtzaiGi6t2IGg4WsdPF2NzhbgbA1VeAbTQC4klsFeiV0/bdlhfTLxXzBcO NpWss5K/WD8iiIGXKC0IKSUkuofJdUlQBLSBXzGDVVKGPGvVn/nOYIT7gIWUX0m4 YQ0BocUWtvoKshqk+f287l3NqjTtV6kcxZcLC2cnrH61tP9B629PXHsGFzlAWOQl DzDi+qSj4n3kAU+H8XSIzRbs9F2RS/qxqSPE211fIcYSfhfKauw2TTWtkFCTAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUK6iW9kQ51m2TZ254l7NHc4od3rMwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOggADANBgkqhkiG9w0BAQsF AAOCAQEAvu9YeVmiutEN8ednKtCm81VbMpVH6N82mzeOUvh4cpbRIMi08Cx5eCn0 6iTP8y16qkQCCAieN4EOfOjX1NAL0DllBTVZrbysQwVJ6eaSjQiFhB//Fw17BL6x 57pWSXUljsMcyCAvf6Ix3EHVk9pbTrQ5DUatxXw3kZH2FG/ZMjqp0IwNcTyrHViF 6roH9/SfSPYGQg5IPgEwBSKsuBcQ73J7NEdXwigCx1r4eMtH9gzh3diQBy977E0Z dUwMl52et2LMB6uP00ytFi+MG8STUICY4xnLc5/cWN9IVLFPxG66EHdUN2CtuhkB fiMZOHC2m4Uh1SaO8m4aaikAW9Qy7A== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:03 2025 by rpki-client